RBehrns Posted July 3, 2023 ID:1575627 Share Posted July 3, 2023 I find that Malwarebytes is blocking this site: KeepCassCountyBeautiful.com which is at 72.249.48.144. I don't know why. This small nonprofit has nothing on the site that should cause any trouble. I assist the organization with various tasks including some of the website maintenance. I contacted our provider and he is as baffled as I am. He was able to point me to VirusTotal.com which does show four hits, but I don't understand why they are hitting on this site. There is nothing fraudulent about this organization or the web site. A spot check of some other sites that use the same host are getting through. I'd appreciate any help in determining why MB is blocking this and if possible what is triggering any detections of problems. Many Thanks, Roger Copy from history: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/3/23 Protection Event Time: 5:43 PM Log File: f80b218e-19f2-11ee-86a0-c81f6614dcd7.json -Software Information- Version: 4.5.32.271 Components Version: 1.0.2051 Update Package Version: 1.0.71887 License: Trial -System Information- OS: Windows 10 (Build 19045.3086) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Fraud Domain: keepcasscountybeautiful.com IP Address: 72.249.48.144 Port: 80 Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Link to post Share on other sites More sharing options...
1PW Posted July 4, 2023 ID:1575649 Share Posted July 4, 2023 Info Staff: https://quttera.com/detailed_report/keepcasscountybeautiful.com https://www.virustotal.com/gui/url/88e14a40b8a297cfd0621e47fb1ee206399300c3d90a5a7a893dcf28b0b348c6 Link to post Share on other sites More sharing options...
RBehrns Posted July 4, 2023 Author ID:1575669 Share Posted July 4, 2023 Thanks, very interesting. If I am looking correctly, quttera says the problem is that it links to blocked websites. there is one link to "outdoornebraska.gov" which is the official government website of the Nebraska Game and Parks department is is not being blocked by MB, Not identified by VirusTotal or by Quttera. All the other links are self referential to files on the website. I suppose that I can find and remove the link to the State of Nebraska website although since it isn't either malicious identified as malicious, or being blocked I don't expect to gain anything. All the others are self referential to files, pictures etc within our website. We can't get rid of those. I'm grasping as straws, here. Thanks, Roger Link to post Share on other sites More sharing options...
Staff Solution BjelakovicL Posted July 4, 2023 Staff Solution ID:1575681 Share Posted July 4, 2023 Hi, The block will be removed. Domain was blocked due to hosting malicious pdfs: http://keepcasscountybeautiful.com/images/how-to-get-shirts-for-free-on-roblox.pdf http://keepcasscountybeautiful.com/images/free-robux-hack-v3rmillion.pdf http://keepcasscountybeautiful.com/images/free-spin-hack-coin-master-2021_GM406889139.pdf http://keepcasscountybeautiful.com/images/roblox-mobile-hack_GM431946152.pdf http://keepcasscountybeautiful.com/images/how-to-get-free-robux-codes-generator.pdf http://keepcasscountybeautiful.com/images/how-to-get-free-spins-on-coin-master-game_GM406889139.pdf http://keepcasscountybeautiful.com/images/coin-master-spins_GM406889139.pdf http://keepcasscountybeautiful.com/images/easy-robux_GM431946152.pdf Link to post Share on other sites More sharing options...
RBehrns Posted July 4, 2023 Author ID:1575734 Share Posted July 4, 2023 That's great. Thank you so much. And thank you for such prompt attention to this. I'm impressed. Roger Link to post Share on other sites More sharing options...
Recommended Posts